Run NetFlow Analyzer on a separate server
Hi AdventNet,
In your manual you mention "Run NetFlow Analyzer on a separate, dedicated PC or server. The software is resource-intensive, and a busy processor can cause problems in collecting NetFlow data."
As we've discovered a dual xeon with 4GB of RAM is not coping, and even in the 1 daily report I do I can see huge dips in the chart for whenever anyone does anything in the GUI. Plus we had someone hacked in a big way and thought - great we're demoing Netflow Analyzer - that'll show us - wrong it showed no traffic (depsite a very busy site) for even hours before the attack, even 2 days of graphs showed only 6 connections (considering it gets thousands a day).
So what is required (apart from another server) to seperate things so we can analyze without losing data?
We'd probably like to have 2 collectors (should 1 fail) and reports etc handled by another server so all the info is there to be analyzed on the GUI without effecting collection of data at the time.
Thanks.
New to ADSelfService Plus?